Please help with connection FROM MT

RouterOS General
1

I tried to set up PPTP to another MT over the internet. My connection is:
[rherry@Mikrotik Router] interface> print
Flags: X - disabled, D - dynamic, R - running

NAME TYPE RX-RATE TX-RATE MTU

0 R Public ether 0 0 1500
1 R BTC ether 0 0 1500
2 R LBJOnB1 ether 0 0 1500
3 R LBJ - ex Peripheral ether 0 0 1500
4 primera pptp-out 0 0

[rherry@Mikrotik Router] ip address> print
Flags: X - disabled, I - invalid, D - dynamic

ADDRESS NETWORK BROADCAST INTERFACE

0 ;;; ISP
192.168.32.86/30 192.168.32.84 192.168.32.87 Public
1 zzz.yyy.xxx.1/27 zzz.yyy.xxx.0 zzz.yyy.xxx.31 LBJ - ex Peripheral
2 10.10.101.1/24 10.10.101.0 10.10.101.255 LBJ - ex Peripheral

[rherry@Mikrotik Router] ip route> print
Flags: X - disabled, A - active, D - dynamic,
C - connect, S - static, r - rip, b - bgp, o - ospf

DST-ADDRESS PREFSRC G GATEWAY DIS

0 A S 0.0.0.0/0 r 192.168.32.85 1
1 ADC 10.10.101.0/24 10.10.101.1
2 ADC zzz.yyy.xxx.32/27 zzz.yyy.xxx.33

Currently, no firewall rules are enabled.

My customers, both from public IP and private IP, all can do internet, can ping, everything. But, somehow, the MT itself cannot ping over the internet. Again, no firewall rule is enabled, thus I'm sure ICMP is not blocked. I can ping down (public or private ip of my cust), but I cannot ping up.

Please help. Since I cannot ping, the PPTP also don't work, the log just said connection timeout.

When I install another MT below my MT router, and I setup PPTP client there, this new MT can connect to the PPTP server over the internet. So, I'm also sure that internet is ok, and the PPTP server is ok too.

Please advise what I should check in my router. Or is it possible if something was change on my ISP side?

:rherry

2

If you actually have the address 192.168.32.86 on your public interface, this explains a lot.
This is private ip address space which is not routed on the internet. So going out with this source ip address (which you do when you initiate some connection directly from your router) you won’t get packets back from “the outside”, as nobody knows how to reach the (private) ip address.

This will probably also be the reason for PPTP not working. Depends on if your uplink ISP is doing masquerading for these addresses, or just is using private ip address space on your /30 transfer net.

Talk to your ISP - they should be able to help you out on that!

Best regards,
Christian Meis

3

True, when I did advanced-ping, and src-addr using my public, I did receive a reply.

Ok, will try to talk to them.

Thanks, Chris.

:rherry